instances: 1

postgresql:
  imageName: "docker.io/paasup/cnpg-postgresql:18.4-bci15.7-hardened-20260803"

  parameters:
    max_connections: "200"
    shared_buffers: 256MB
    work_mem: 8MB
    maintenance_work_mem: 128MB
    effective_cache_size: 1GB
    log_timezone: Asia/Seoul
    timezone: Asia/Seoul

  sharedPreloadLibraries:
    - pgaudit
    - pg_stat_statements

primaryUpdateStrategy: unsupervised
primaryUpdateMethod: switchover

storage:
  size: 20Gi
  storageClass: longhorn

walStorage:
  enabled: true
  size: 10Gi
  storageClass: longhorn

resources:
  requests:
    cpu: 500m
    memory: 1Gi
  limits:
    cpu: 1000m
    memory: 2Gi

bootstrap:
  initdb:
    database: flowise
    owner: flowise
    password: "$bootstrap.initdb.password"
    encoding: UTF8
    postInitApplicationSQL: []
    ensure: present
    reclaimPolicy: retain

databases:
  - name: appdb
    owner: appuser
    ensure: present
    reclaimPolicy: retain
    extensions:
      - name: pg_stat_statements
      - name: pgaudit

enableSuperuserAccess: false

affinity:
  enablePodAntiAffinity: true
  podAntiAffinityType: preferred
  topologyKey: kubernetes.io/hostname
  nodeSelector: {}
  tolerations: []

monitoring:
  enablePodMonitor: false

backup:
  enabled: false
  retentionPolicy: 30d
  barmanObjectStore:
    destinationPath: ""
    endpointURL: ""
    s3Credentials:
      accessKeyId:
        name: ""
        key: ACCESS_KEY_ID
      secretAccessKey:
        name: ""
        key: ACCESS_SECRET_KEY

scheduledBackup:
  enabled: false
  schedule: "0 0 2 * * *"

pooler:
  enabled: false
  instances: 2
  type: rw
  poolMode: transaction

---
global:
  storageClass: "longhorn"

image:
  registry: docker.io

persistence:
  enabled: true
  size: 1Gi
  storageClass: longhorn

resources: {}

worker:
  enabled: true
  replicaCount: 1
  resources: {}

ingress:
  enabled: true
  ingressClassName: "apisix"
  pathType: Prefix
  annotations:
    cert-manager.io/cluster-issuer: "root-ca-issuer"
    cert-manager.io/duration: 8760h
    cert-manager.io/renew-before: 720h
    k8s.apisix.apache.org/plugin-config-name: https-redirect
  hosts:
    - host: "{{ .Name }}.{{ .Domain }}"
      paths:
        - /
  tls:
    - hosts:
        - "{{ .Name }}.{{ .Domain }}"
      secretName: "{{ .Name }}-tls-secret"

postgresql:
  enabled: false

externalPostgresql:
  enabled: true
  host: flowise-db-rw
  port: 5432
  username: flowise
  password: "$bootstrap.initdb.password"
  database: flowise

redis:
  enabled: true